What are the responsibilities and job description for the Cybersecurity / Product Security Specialist position at Primary Talent Partners?
Primary Talent Partners has a 6 month contract opening for a Cybersecurity / Product Security Specialist to join a multinational medical device company for an onsite/hybrid role operating out of Lafayette, CO.
Pay: $54.00 - $64.00/hr
Contract: 6 month contract, extensions likely, conversion possible
Type: W2 contract, no PTO, no Benefits. ACA-compliant supplemental package available for enrollment.
Onsite: Onsite in office 4 days per week
Education Required: Bachelor's degree related to computer science or cybersecurity
Years’ Experience Required: 2 or more
Job Description:
The Acute Care & Monitoring group develops products that are designed to collect patient information from around the hospital and ensure that caregivers can make the right decisions at the right time. We strive to improve patient outcomes by ensuring that when a problem emerges at the bedside, caregivers are aware of it and can respond quickly. We analyze and learn from patient data to find better ways to provide quality care for patients. Our products are deployed in care facilities across the globe and help to save and improve lives every day. We’re purposeful. We’re committed. And we’re driven by our Mission to alleviate pain, restore health and extend life for millions of people worldwide.
This position is primarily responsible for supporting pre-market project teams in building security deliverables. You will work with R&D teams to help them understand how to build products securely by design and how to maintain their security for their product lifetime.
Top 3 Responsibilities:
- Working with medical device product teams to build security deliverables and documentation
- Building and updating SBOMs
- Building threat models for medical devices
Top 3 things the manager is looking for in a candidate:
- Experience with threat modeling
- Experience with SBOMs (Software Bill of Materials)
- Experience with CVSS scoring
Position Responsibilities:
- Build threat models for products and assess threats for risk and possible mitigation
- Build SBOMs for products and review their accuracy
- Review and interpret CVEs for impact on products
- Review and interpret penetration testing results
- Work with technical experts and product owners to measure risk associated with vulnerabilities
- Document risk assessments
- Recommend mitigations for security risks
Minimum Qualifications:
- Bachelor’s degree in computer engineering, software engineering, cybersecurity, computer science, or related field
- 2 years of experience in a cybersecurity-related role
- Experience with networking concepts
- Effective communication both verbally and in written form
- Experience with threat modeling tools, such as Microsoft Threat Modeling Tool
- Experience with vulnerability monitoring tools such as Dependency-Track
- Experience with using the NVD
- Familiarity with the CycloneDX SBOM specification
- Experience with CVE interpretation
- Experience with CWE interpretation
- Experience with CVSS scoring methodology
- Experience explaining technical concepts to non-technical individuals
- Familiarity with FDA Pre and Post-market guidance
- Familiarity with the OWASP Top 10
- Familiarity with standards such as IEC 81001-5-1 and IEC 62304
If you are a person with a disability needing assistance with the application or at any point in the hiring process, please contact us at info@primarytalentpartners.com
#PTPJobs
Salary : $54 - $64